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Two observations are given on the fidelity of schemes for quantum information process- 
ing. In the first one, we show that the fidelity of a symplectic (stabilizer) code, if properly 
defined, exactly equals the 'probability' of the correctable errors for general quantum 
channels. The second observation states that for any coding rate below the quantum 
capacity, exponential convergence of the fidelity of some codes to unity is possible. 
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1. Introduction 



Two observations are given in this paper on the fidelity of schemes for quantum 
information processing, especiaUy on that of quantum codes and entanglement dis- 
^ \ filiation protocols. In the first one, we give a formula for the fidelity of symplectic 

O^' (stabilizer) codes^'^''^. While relating the fidelity of symplectic codes with the 'prob- 

ability' of correctable errors for channels represented by trace-preserving completely 
positive (TPCP) maps was already done in the literature^'^'^, this work shows that 
}J] ■ the fidelity, if properly defined, exactly equals the 'probability' of the correctable 

5^ , errors for general quantum channels. This formula is also useful for assessing the 

security of quantum key distribution (QKD) protocols^. In fact, one of the moti- 
vations for analyzing the fidelity of symplectic codes was to prove the security of 
the Bennett-Brassard 1984 (BB84) QKD protocol® or its analogs along the lines of 
Shor and Preskill^'^'^. 

The second observation is related to the problem of the quantum capacity of 
noisy quantum channels^*^'^^. It states that for any coding rate below the quantum 
capacity, exponential convergence of the fidelity of some codes to unity is possible. 

This paper is organized as follows. In Section 2, several basic notions such as 
Weyl's unitary basis are introduced. Section 3 contains the formula for the fidelity 
of symplectic codes, which is applied to entanglement distillation in Section 4. Sec- 
tions 5 and 6, respectively, contain the observation on exponential convergence of 
fidelity and a known lemma to be used in the subsequent section, where the obser- 
vation is proved. Sections 8 and 9 contain a remark and a summary, respectively. 
Two appendices are given to explicate the basics of symplectic codes and to give a 
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technical argument on the capacity, respectively. 

2. Basic Notions 

2.1. Terminology and Notation 

We will treat copies of a quantum system described with H, d = dimH < +oo. A 
composite system consisting of n such copies is sometimes called an n-quantum- 
((i-ary-)digit system. The set of all linear maps from a Hilbcrt space H into itself 
is denoted by L(H). Hereafter throughout, it is assumed that H is a Hilbert space 
whose dimension d is a prime number, though the results in this section are true 
for any integer d > 2. Wc assume this because the structure of vector spaces over 
the finite field ¥4 = Z/dZ will be exploited. For two subsets A and B of an additive 
group, A + B denotes {a + b \ a G A,b G B}, and a + B denotes {a} + B. 

In this paper, the way to specify quantum codes varies according to the context. 
For most parts, a quantum code indicates a pair (C, TZ) consisting of a code subspace 
C of H®" and a recovery operator TZ; sometimes C alone is called a quantum code. 
A more general definition allowing encoding maps will appear in a later section. 

2.2. The Weyl Basis 

A representation U : Q B x i-^ Ux & \-{^) of a, group G usually indicates one with the 
property Ux+y = UxUy, x,y £G. However, in quantum mechanics, vectors in L(H) 
proportional to each other stand for a single quantum state, so that it is natural 
to weaken the stipulation Ux+y = UxUy to that Ux+y = r]{x,y)UxUy, x,y e G, 
for some collection of complex numbers ri{x,y), x,y E G- HU satisfies the weaker 
assumption, it is called a ray (projective) representation. 

Weyl^^ introduced two unitary operators, X and Z, on H satisfying the property 

XZ = ujZX, (1) 

with u) being a primitive d-th root of unity to give a unitary ray representation, N, 
of = F^, the 2-dimensional numerical vector space. A concrete form of N can be 
given as follows. Fix an orthonormal basis {|0), . . . , |rf — 1)} of H. Define X and Z 

by 

X\a) = \a-l), Z\a) =uj°'\a), a G F^. (2) 

We define A'^ by 

A^(a,6) = x/^'^"^', {a,b)&X (3) 

for d = 2, and by 

Ar(„,i,) = {a,b)eX (4) 

for d> 2. For d = 2, N(^a,b)j b) ^ (0, 0), are the Pauh operators. Note that there 
are many systems of complex numbers of modulus 1 such that V)X°'Z^ 
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is a ray representation of X. Using the factor \/— 1 in the case of d = 2 is for 
a technical reason (Appendix A, Section A. 5). It is remarked that Weyl actually 
derived the concrete representation in (4) from (1) with more natural stipulations 
such as the irrcducibility of A^. 

We identify ((xi, 2i), . . . , (a;„, z„)) e A"" with (xi, zi, . . . , a:„, z„) € F^". To 
cope with composite quantum systems, we write Ny — Ny^ • • • A^^^, where 
y = e X"-, and Nj = {Ny \ y G J}, where J C F^". We call the 

operators A^j, Weyl unitaries and the system {Ny}y^Y2„ Weyl basis. An important 
property of the Weyl basis is the commutation relation 

NyNy, = jy'y'^'-Ny,Ny, (5) 

where 

n 

(y, y')sp = XI ^i^'i ~ ^i^i 

i=l 

for y = (xi, zi, . . . , Xn, Zn) and y' = {x'l, z[, . . . , x'^^, z'^) G F^". The commutation 
relation (5) follows from 

Nia,b)N{a',b')=^~'"'' N^a+a',b+b'), a,b, a' ,b' € ¥d, (7) 

which in turn follows from the primitive relation (1), and the map that sends (y, y') 
to {y, y')sp in (6) is known as a symplectic bilinear form. The relation (5) implies 
that {x,y)sp = if and only if and Ny commute. 
We have a lemma i^'^^. 

Lemma 1: The vectors 

where . . . , In)) = \li) (8) ... (8) \ln), form an orthonormal basis of H®" (g) H®". 

Note that putting j*) = |\E'o2r.) for the zero vector 0^" in F^", we can rewrite \"^y) 
as (/ (g) A^y)|\l/). The zero vector 0™ e F^* will be sometimes abbreviated as if 
there is no fear of confusion. 



2.3. Choi's Matrix 

A simple but helpful tool in quantum information theory is the following one-to- 
one map of Choi^^ between the CP maps on L(H®") and the positive semi-definite 
operators in L(H®" H®"): 

Mn{A) = [i(E,A]mm, (9) 

where X is the identity map on L(H'^"). In fact, Choi introduced d"M„(^) in the 
matrix form (with more flexibility on dimensionality) to yield fundamentals of CP 
maps. 



4 Mitsuru Hamada 



According to Theorem 1 of Choi^'', if p„ = Mn{A) is written as 

Pn= (10) 

or equivalently as 

then the CP map A is represented as 

A:a<-^ Y Oiy,zNyaNl. (11) 

This immediately follows from the fact that Choi's matrix, viz., the matrix of 
(T'MniA) with respect to the basis {\l) ® \m)}i^rm is the x d" block matrix 
whose (l,m)-entry is the d" x d" matrix oi A{\1) {m\) . 

2.4. Discrete Twirling 

We begin with proving the following formula for discrete twirling (Appendix A of 
Ref. 16, Ref. 17): For an operator p„ e L(H®") in (10), we have 

where U is the complex conjugate of U, viz., the element {l\U\in) is the complex 
conjugate of {l\U\m) for l,m £ F^. 
Proo/ 0/ (12). Put 

/'n = i ^ (^<^A^^)Pn(^<^iV^)^ 



Then, 



= rfL E %,z(/®A^xA^.A^J)|*)(*|(/®A^xA^.A^J)^ (13) 

a;,i,,z6F2'' 

where we used the relation 

(A O /)!*) = (J® A"^)!*) (14) 

with A'^ being the transpose of A with respect to which means that if A = 

J2i,m^i,rn\l){m\, then A'^ = I]/,m Using (5), we then have 

Pn = ^ Y «,,.a;(-'^-^)-(7®A^,)|*)(*|(7 0Af,)t. 
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Since 

io'^'^^y-'^'^'-p = whenever y ^ z, 

which holds because fy^z ■ x i— > where y ^ z,\s a. character of F|" such 

that fy-z{x) ^ for some x e F^" (e.g., Ref. 18 or Section III of Ref. 17), we 
obtain the formula (12), as desired. 

2.5. Twirled Channel 

Suppose a TPCP map A on L(H®") is given, and the twirling is applied to the 
corresponding state p„ = M„(^). Then, the resulting state is given by (13), and 
this can be regarded as the mixture 

Pn = ^i: M„(A4^-^) 

where A/'x : <t N^crN^ and A4C denotes the composition that maps a to 
M{£{a)), etc., on account of the representation of CP maps in (11) [and the block 
structure of Choi's matrix mentioned below (11)]. In other words, the channel A 
that corresponds to the twirled state p'^ via A = M~^(p^) is given by 

Since the matrix of Mn{A) is diagonal with respect to the basis {|*x)}xeF2", the 
channel A can be expressed as 

i::a^5^P4(a;)iV^<7Art, 

X 

where P4 is the probabihty distribution on IF^^'' defined by 

Pa(x) = (*,|M„(^)|vl/,), xGX" (16) 
with the basis in Lemma 1. 

3. Fidelity of Symplectic Codes 

In this section, we present the formula for the fidelity of symplectic codes. A self- 
contained exposition of symplectic codes, as well as proofs of the lemmas in this 
section, can be found in Appendix A, which is a recast of Section III of Ref. 19 
except the proof of Theorem 3. 

Recall that a symplectic code is obtained from a subspace L C F^" that is 
contained in the symplectic dual of L. Specifically, (a code subspace of) a 
symplectic code associated with L is a subspace of the form 
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where t{x), x G L, are some complex numbers. When dimF^ L = n — k, we have 
(P-k gy^Q]^ subspaces, and the collection of these subspaces is also referred to as the 
symplectic code associated with L. With a basis (gi, . . . ,gn-k) of L fixed, we have 
(F-~^ cosets of in F^" of the form {x e F^" | (.g^, x)s-p = Si, i = 1, . . . , n - fc}, 
where s = (si, . . . , s„_fe) G FJJ"''. Thus, we can label the cosets of L""- by s G F^"*". 
It is known that there is a one-to-one correspondence between the set of these cosets 
and that of the code subspaces, C^*\ s G F^"*^. For the specification of C^'''\ see 
Appendix A. If we choose a vector x{s) from each coset s of in F^", and denote 
the set of coset representatives x{s) by Jo, we have quantum codes {C^'^\7i^'^^), 
s e F;^"'^, where TZ^^^ : L(H®") L(H®") is a recovery operator designed so that 
the code is A^j-corrccting, J = Jq + L. 

The recovery operator can be specified by Kraus operators, 

K^t'^ = 4it)^t+s, ^eFr^ (17) 

where Ilf is the projection onto the code subspace C^*'\ viz., 

7eW(a)= Y: K^t'^<^K^t'^^- (18) 

This operation is expressed as the measurement {Ili+slt followed by the unitary 
Nl^^y The measurement result t represents the 'relative syndrome', so to speak, for 

the code C^'^\ We denote the trace-decreasing CP map a ^ K['^aK['^^ by 7^('^'*^ 
so that 7e(«) = EteF"-'= 

Let TTc denote the projection operator onto C divided by dimC. The entangle- 
ment fidehty^° of the A^j-correcting code C used on a channel A : L(H®") L(H®"), 
cr i-^- X^seF^" Pn{x)Nx<jN^, where P„ is a probability distribution on Af", is given 

by 

j;(7rc(3),7eW^) = P„(J) = J2 Pn{x) (19) 

for any s G F^"*^. This follows from a finer analysis on the entanglement fidelity for 
TZ^^'*\ namely, from the next lemma, which is proved in Appendix A. 

Lemma 2: Let a subspace L C F^" which is self-orthogonal with respect to the 
symplectic form (•, •)sp and x{t), t G F^'^*^, be given as above. Then, 

x€:x(t)+L 

for any s,t G F^-'' and channel A : L(H«^") ^ L(H®"), a ^ ExeF^- Pn{x)N,^<7Nl 

Remark. Throughout, is to be understood as the unnormalized entanglement 
fidelity2i. 

The corresponding statement for general channels is given in the next theorem, 
which will be proved in Appendix A. 
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Theorem 3: Let a subspace L C F^" and x{t), t be given as above. Then, 

the symplectic codes {C^^\7l^^^ = '^^'R-^'^'*^) associated with L satisfy 

sgFJ-fc xex{t)+L 

for any t G F^"'' and TPCP map A : L(H®") ^ L(H®"), where P4 is associated 
with A by (16). 

Corollary 4: For J = Ut[^(0 + i]> 

Remark. That X^a^G j ^ lower bound to the average fidelity in Corollary 4 

easily follows from the observation of Gottesman and Preskill^ as remarked in Ref. 7. 

4. Fidelity of Entanglement Distillation 
4.1. One- Way Protocols 

In this section, we will consider the problem of evaluating the fidelity of entan- 
glement distillation schemes and sec its close relation to quantum error-correcting 
codes. Shor and Preskill described their famous proof of the security of the BB84 
protocol in terms of entanglement distillation. The entanglement distillation proto- 
col they used is as follows, where as usual, the protocol is performed by Alice and 
Bob. First, imagine they are given a bipartite state M„(yl„) = [Z (g) 
where |*) = d-"/^ ^ |==jj ^ |^^^ {|s71l)} „ is an orthonormal basis of C^*-* for 
each s G F^~'^, {\T/u)}s,u is an orthonormal basis of H®", and C is spanned by 
|s7tt), u G F^, for each s € F^"*^. Alice performs the local measurement {lis} on the 
first half of the system, where 11^ denotes the projection onto the subspace C 
and Bob performs the recovery operation for the A^j-correcting code C'"-* knowing 
that Alice's measurement result is s. Now recall the physical meaning of entangle- 
ment fidelity^°: Suppose an ideal bipartite state |$) = |$s) = d~'' \sTu) (E) Ivw) 
is given, where {|s7w)}„ plays the role of an orthonormal basis of the 'refer- 
ence' system^O; then, Fe{7Tc,B) = (4>|[J (g) Since Alice obtains 
each measurement result s with the equal probabilities and the resulting state is 
[X(E)^„](|$s)($s|) conditioned on this event, the fidelity of this distillation protocol 
for Mn{An) is exactly the same as the average entanglement fidelity of the code 
(C(«),7e('*)) in Corollary 4. 

For the security proof, the above argument is enough''. For the purposes of en- 
tanglement distillation, however, we should start with M„(^„) = [Jig)^„](|\E')(\i/|), 
rather than M„(^„), since in the standard setting the given bipartite states are of 
the form p®", which is written in (or reduced by twirling to) the form M„(^®"). 
This problem is resolved upon noticing the relation {U ^ U)\^) = \^), which 
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holds for any unitary U by (14), and the existence of the unitary U that maps 
|(s,m)), to |s71l), (s,m) e F^"*" X ~ F"^. In fact, we can choose Tl\{s,u)) as IWu), 
{s,u) e F;^-'^ X F^ so that Mn{An) = M„(^„). 

Thus, wc sec the average entanglement fidelity given in Theorem 3 is the fidelity 
of the following one-way entanglement distillation protocol for the state M„(yl„) 
(or for any bipartite state Pn G L(H®" (g) H®") if the participants of the distillation 
protocol perform the discrete twirling as a preprocessing). 

Protocol. First, Alice performs the orthogonal measurement consisting of the 
projections onto C where provided Alice's measurement result is s, the resulting 
state is p^*^ = [I (g) ^„](|$s)($s|). Bob applies the recovery operator TZ^^^ to his 
system. Alice and Bob, respectively, apply some unitaries Ua and Ub such that 
Ua\Wu} = |0"-'=,m) and J7b|s7u) = |0"-'=,m). 

Protocols thus obtained will be sometimes called symplectic (entanglement) dis- 
tillation protocols. This class of one-way protocols are also applicable to correlated 
states22'i7. 



4.2. Two-Way Protocols 

Theorem 3 is also useful for analyses of two-way entanglement distillation from 
multiple copies of a state p. In this case, the corresponding channel An can be 
written as for some channel A : L(H) L(H). For example, consider Ben- 
nett et al.'s protocoP^, where Alice and Bob use the symplectic code associated 
with span (0, 1, 0, 1) = {(0, 0, 0, 0), (0, 1, 0, 1)}, where n = 2 and fc = 1. [This code 
is sometimes called [[2, 1]] cat code and the core of this distillation protocol was 
originally described^"^ in terms of quantum gates as a decoding network of the cat 
code was^^'^^.] The protocol consists of several iterations of the two-way procedure 
using span (0, 1, 0, 1) and a one-way entanglement distillation protocol. The two-way 
procedure using span (0, 1,0, 1) is not much different from the one-way symplectic 
distillation protocol using it: In each step, Alice and Bob pair up surviving states, 
and for each pair they do the same measurement and unitaries as described in 
Section 4.1, where in the second or further step, the basis {\l) (E) |wi)};.,„gF5 is to 

be understood as the basis {|0"^'^,w,) ® |0"^'^, obtained newly in the pre- 

vious step. In the present case of two-way distillation, however, they retain only 
states with result f = 0, or t e T for some fixed proper subset of F;^-'^ [recall 
T?.*^"^ = X!/, ^'•^'*-']; and discard the rest. Clearly, both the two-way subroutine and 
the final one-way procedure can be replaced by arbitrary ones based on symplectic 
codes that are described or exemplified above^^, though the problem of estimating 
the fidelity for such schemes is non-trivial for general states, which is solved by 
Theorem 3. 
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5. Exponential Convergence of Fidelity 

Recently, a formula for the quantum capacity written with coherent information, 
which had been conjectured by several authors, was confirmed^^'^^. Regarding this 
topic, from a view point of information theory or large- deviation theory, we will 
consider the problem of finding attainable speeds of convergence (exponents) of the 
fidelity of quantum codes, or other similar schemes, to unity. 
A memoryless quantum channel is a TPCP map 

^:L(Hc)^L(Ho). 

The term 'memoryless' refers to the property that A acts on a density operator p 
in L(Hf") as A coding scheme or code for is a triple (C„,f„,D„) that 

consists of a Hilbert space C„, and TPCP maps 

£n : L(C„) ^ L(Hf (21) 
Vn : L(H®") ^ L(C„). (22) 

Definition 5: A number R is said to be an achievable rate for A if there exists a 
sequence of codes {Cn,SmT^n) for A^^ such that 

logrfdimC„ 
lim sup — > R 

n— >oo 

and 

lim i?e(7rc„,2^n^®"f„) = l. 

Definition 6: The supremum of achievable rates for a memoryless channel A is 
called the quantum capacity and denoted by Q(>1). 

Remark. This definition is essentially the same as the one using the subspace 
fidelity in Rcf. 21, but wo employ F(.{ttc,13) rather than the minimum pure- state 
fidelity. For the equivalence, sec Appendix B or examine the arguments in Rcf. 21. 

Definition 7: A number E is said to be an attainable exponent for a channel A 
and a rate R if there exists a sequence of codes (C„, £„,!?„) for such that 

liminfi^i^^^>i? 



and 



,^,,f_l0g.[l-i^e(.C„,P„.4^"g.)]^^_ 



71 — *oo n 
We will prove the next theorem in what follows. 



Theorem 8: For any memoryless channel A, and any rate R smaller than Q(^), 
we have a positive attainable exponent. 
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6. Random Coding Bound for Symplectic Codes 

A random coding argument shows the next lemma. In fact, the proof of the main 
result of Ref 6 or Ref 27 applies to this lemma if we replace X thereof by Af™. 
Alternatively, the proof in Ref 19 works if we assume the inner code of the con- 
catenated code thereof to be the identity map. 

Lemma 9: For any positive integer m, number R, < R < 1, and memoryless 
channel B : L(H®™) — > L(H®™), there exists a sequence of symplectic codes {(C^ C 
W^"^" ,'Ru)}u such that log^dimCi. > rnvR, and 

1 - Ej;(7rc„,7^.e®^) < /Mexprf„[-i/£;„(i?,PB)], (23) 

where 

E,r^{R,PB) = rmn[D{Q\\PB)/m+\l-R-H{Q)/m\+], (24) 
Q 

expj[7/] = W , f(v) is a polynomial in v, |y|+ = max{y, 0}, H{Q) = 
-J2xQ(^)^^SdQi^)' £)((5||P) = I^a, logd[Q(a;)/P(a;)], and the minimum 
with respect to Q is taken over all probability distributions on F^*. 

Remarks. The symplectic code (C^ C H®™'',??.,^) is to be understood as the 
ensemble { {cif \TZi^^)}s, where s rims through all syndromes, and E denotes the 
expectation operation to produce the ensemble average with respect to the uniform 
distribution over all syndromes, by which Corollary 4 is applicable. The statement 
can be strengthen to 'For any positive integer m, number R, < R < 1, there exists 
a sequence of symplectic codes {{Ciy,TZ,y)}iy such that log^dimCj^ > mi'R and for 
any memoryless channel B : L(H®'") L(H®'"), (23) is satisfied'. This means 
that we can find symplectic codes whose structures do not depend on the channel 
characteristics, especially on Pg. The proof of this refinement is essentially the same 
as that in Ref. 7. The proof uses the existence of a symplectic code whose 'type 
spectrum', which is a natural generalization of the weight spectrum (distribution) 
in coding theory, is 'well balanced', and the fact that the fidelity of any symplectic 
code on a memoryless channel is invariant under permutations of the coordinates 
(digits). 

7. Proof of Theorem 8 

Suppose a rate r is achievable for A. Then, there exists a sequence of codes 
{{Cn,Sn = £,1^n = T^)} whosc rate, as n becomes large, approaches r, which 
may be arbitrarily close to Q(^). We may assume dimC„ — d™ for some integer 
m for every n as argued in Appendix B (since Q = Qc,d)- We apply Lemma 9 set- 
ting B = VA^'^S and identifying H®™ with C„. Namely, we use two-stage coding 
in which the ni'-quantum-digits system is divided into u blocks of length n, each 
block is coded with (C„,f„ = f ,©„ = V), and u blocks are coded with the codes 
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Fig. 1. The two-stage code in the proof of Theorem 8 consisting of the inner code {Cn,£, 'D) and 
the outer (symplectic) code {Ci,, TZu), where Cn — H®"* and ^ is a memoryless channel. 



for B" the existence of which is ensured in Lemma 9 (Fig. 1). The two-stage codes 
have overall rates not smaller than 



n 



From (24), E^{R, Ps) is positive if i? < 1 - H{PB)/m, i.e., if 

HiPB)' 



m „ m 
—R < — 
n n 



1 



(25) 



m 

The number 1 — H{Ps)/m can be bounded as 

^ H{Pb) ^ ^ hiPejO^n) + [1 - PB(0^"')]2m 
m ~ m ' 

where h is the binary entropy function. Note also by the definition of the entangle- 
ment fidelity, we have 

F,{nc„,VA^"£) = F,{nc„,B) = (*|M„(B)|*) = Pb(02™), 

where |*) = l^o^™)- Then, because m/n and F^{'jrc„,VA^''£) = ^8(0^™) tend to 

r and 1, respectively, as n grows large, the number on the right-hand side of (25), 
for a large enough n, will be arbitrarily close to r, which in turn can be made close 
to Q(^). 

Thus, wc have a sequence of codes of desired performance for A^ , I = n, 2n, . . .. 
To interpolate a code for A^ with I = ni' + i, < i < n, into this sequence, we just 
past a trivial code of dimension one for the i-quantum-digit system to the large 
code for nz/-quantum-digit system. 

Remark. Instead of assuming dim C„ = rf™ for some integer m to use the argu- 
ment in Appendix B, we can generalize Lemma 9 so that it applies to memoryless 
channels B : L(H') — > L(H') with dimH' arbitrary but finite. To do this, write the 
number dimH' as the product of the prime factors di- ■■dm, and use the tensor 
product of code subspaces of symplectic codes for quantum-rfj-ary-digit systems. 
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8. Exponents for Entanglement Distillation 

The above argument can be accommodated to the problem of entanglement distil- 
lation from multiple copies of a bipartite state^^'^^'^^. In fact, the achievability of 
a rate, the capacity analog Dc{p) (sometimes called the distillable entanglement), 
and attainable error exponents for a bipartite state p can be similarly defined for a 
given class of distillation protocols C Assume that the participants of a protocol 
are allowed to apply a one-way symplectic distillation protocol to multiple copies 
of 2?(/?®") in the class C, where V is another protocol in C. Note that most of 
protocol classes discussed in the literature, e.g., Ci through Cr of Ref 29, possess 
this property. Then, since the symplectic quantum code in Lemma 9 can be used 
as a one-way symplectic distillation protocol, we conclude that for any state p of a 
bipartite system and any rate below Dc{p), we have a positive attainable exponent. 

Clearly, this conclusion as well as its reasoning extends to the scenario of en- 
tanglement generation over memoryless quantum channels, where the sender Alice 
begins with an arbitrary initial bipartite state pin in some prescribed class Cm, 
sends the half of pin to produce [1 A^"]{pin) , and then Alice and Bob apply some 
distillation protocol to [X® A^"]{pin) allowed in a prescribed class C. [The term 
'entanglement generation' is from Ref 11, where the allowed operations are those 
of local TP CP maps at the receiver's end.] 

9. Conclusion 

In summary, based on Weyl's ray representation of (Z/dZ)^", with which the stan- 
dard symplectic form was associated naturally in considering the commutation re- 
lation for the representation, the fidelities of schemes for quantum information 
processing using the property of the symplectic geometry were evaluated. 
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Appendix A. Basics of Symplectic Codes 
Al. Symplectic Codes 

In this section, the framework of symplectic codes is rebuilt on the theory of geo- 
metric algebra^^'^^. For a subspace L e F^", let L-^ be defined by 

L^ = {yGF2"|VxeL, {x,y},p = 0}. 

By linear algebra, the matrices of commuting unitary operators are diagonal with 
respect to a common basis. A symplectic code is a collection of simultaneous 
eigenspaces of a set of commuting operators in the Weyl basis. By (5), if a set 
L C F^" has the property that the operators N^, x G L, commute with each other, 
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then spanL has the same property. Hence, it is enough to consider a subspace 
L C F^" such that 

\/x,yeL, {x,y)sp = 0, 

which is equivalent to L C L-^. A subspace L e F^" is said to be self-orthogonal 
(with respect to the symplectic bilinear form) if L C L-"- . 

The statement of the following lemma can be found in Rcf. 32, Section 3.2, and 
Ref. 33. A proof based on the very basics of symplectic geometry'^^'"^^ has been 
given in Ref. 19. 

Proposition 1: Let L be a self-orthogonal subspace with dimL = n — k and L = 
span {gi, . . . , gn-k}- Then, we can find vectors gn-k+i, ■ ■ ■ ,gn o,nd hi,...,hn such 
that 

{9i,9j)sp =0, (A.l) 
{hi,hj)sp = 

for i,j = 1, . . . ,n, where Sij is the Kronecker delta. 

A pair of linearly independent vectors {g, h) with {g, h)sp = 1 is called a hyper- 
bolic pair, and it is known that a space with a nondegcncrate symplectic form, such 
as the one defined by (6), can be decomposed into an orthogonal sum of the form 

span {wi,zi} _L L span {w„, z„} 

in such a way that {wi, Zi), i = 1, . . . ,n, are hyperbolic pairs^°. Following Artin^*^, 
we have referred to the direct sum of Ui, . . . ,Un as the orthogonal sum of spaces 
Ui, . . . ,U„ if C/i, . . . , [/„ arc orthogonal. The three equations in the above lemma 
say that F^" is the orthogonal sum of span {^j, i = l,...,n. In the present 
case with the bilinear form in (6), the simplest example of such a decomposition 
of the space F^" is span {ei, 62} _L . . . _L span {e2n-i,e2n}, where {e,}i<i<2n is the 
standard basis of F^" that consists of = (%)o<j<2n € IF^"' 1 ^ * ^ 2n. 

For the remainder of this appendix, we fix an arbitrary self-orthogonal subspace 
L with dimi = n — k and such hyperbolic pairs {gi,hi), . . . , {gn, hn) as given in 
Proposition 1. Any vector x G F^" can be expanded into 

n 

X = ^{wigi + Zihi). (A. 2) 

Thus, the hyperbolic pairs (gi, hi), . . . , (g„, determines the map that sends x 
to {wi, Zi, . . . ,w„, Zn), which is clearly an isometry. For z = {zi, . . . , Zm) G IF™, 
1 < m < n, we write 

m 

X' = l[{N,,r' (A.3) 

i=l 

where the product on the right-hand side is unambiguous because [N^-Y*, i = 
l,...,m, commute with each other. Note that by (7), and N^, where x = 
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m 

Zihi, are the same up to a phase factor. Similarly, for w = {wi, . .. , Wm) € F™, 
1 < m < n, we write 

m 
i=l 

We have seen that any basis {gi, ■ ■ ■ ,gn-k} of a self-orthogonal space can be ex- 
tended to {gi, . . . , gn} in such a way that span {gi, . . . , g„} is self-orthogonal. Since 
Ng., i — 1, . . . , n, commute with each other, we can find a basis of L(H) on which 
Ng. are simultaneously diagonalized in matrix forms. Hence, we can find an n-tuple 
of scalars (/Ui)i<i<n for which the space consisting of ip with 

Ng.i) = Hii), i = l,...,n, (A.5) 

is not empty. We call a nonzero vector (respectively, the set of vectors) satisfying 
(A.5) an eigenvector (respectively, the eigenspace) of {A^gi}i<i<n with eigenvalue 
list (/ii)i<i<„. Take a normalized vector |0, . . . , 0) from this eigenspace, where the 
label (0, . . . , 0) belongs to FJJ. Applying an operator to both sides of (A.5) from 
left and using (5) as well as the symplectic property 

{•^^y)sp — (2/)2^)sp) 

we have 
that is, 

Ng^N^ij = fXiUJ^Si,xUN^^, (A.6) 

This means that N^tp is an eigenvector with eigenvalue list (/UiW^^*'^^°p)i<i<n- If we 
expand x as in (A. 2), then we have (g^, x)sp = Zi, i = 1, . . . ,n, and hence there are, 
at least, d" possible eigenvalue lists for {Ng.}i<i<n- However, for any pair of dis- 
tinct eigenvalue lists, the corresponding eigenspaces of {Ng.}i<i<n are orthogonal, 
and hence there are no more eigenvalue lists. Thus, we have an orthonormal basis 
{\si,...,Sn)}{si,...,sn)ev2 defined by 

|si, . . . ,s„) = X^\0, . . . ,0), where s = (si, . . . , s„). (A.7) 

It is easy to check that (A^(a,6))'^ is the identity operator, which implies eigenvalues 

of Nx, X G F^", arc rf-th roots of imity. Hence, we can take /i^, 1 < i < n, to be all 
one, which we will assume throughout. Note that the basis {|si, . . . , Sn)}(si,...,s„)eFj 
depends on {g^, hi), i = 1, . . . ,n. 
We expand x as in (A. 2) and put 



Z — {zi, . . . , Zji), 

w = (wi,...,w„). 



(A.8) 
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Define [a, 6] as (ai, 61, . . . , a„, 6„) G F^", X" as ® • • • ® X""" and as Z''^ (g) 
• • • Z*-" for a = (ai, . . . , a„), 6 = (61, . . . , 6„) e F3. Then, 7V[„,b] = 

. . . ,ln) = \li — ai, . . . ,ln — an) 

and 

n 

Z'>\h,...,ln)=^u:''^'^\li,.-.,L), 

i=l 

a, 5, . . . , ?„) e F^, by the definitions of A'', X and ^. We notice that the actions 
of X and Z , z,w & on the new basis is quite similar to those of and Z 

on 1^1, . . .,ln)- 



X \h, ...,ln) = \ll+Zi,...,ln + Zn) (A.9) 

and 

n 

T"\h,...,ln) = l[u^^''\ll,...,ln), (A. 10) 

i=l 

z,w,{li, . . . , In) e F^\ Eq. (A.9) holds by definition, and (A. 10) can be checked as 
follows. 

Proof of (A. 10). Since A'' is a ray representation, X and Z^ can be written as 

with some constants A and A', where Z = (/i, . . . , Z„) and i runs through 1 to n in 
the summations. Then, 

= -Tx'W) 

= \\'N^„u„g,N^,l,h^G^) 

(-) AA'a;(^'-'S-^'''''')-Arj:,i,ft,iVE,^,3,F) 
= w^''"-''x'z"'|0^) 



where the equalities (a) and (b) follow from (5) and (A. 5) with the assumption 

Hi — I for all i, respectively. □ 

Now we are ready to see the principle of symplectic codes. 
Proposition 2: ^'^-S. l,et a subspace L C F^" satisfy 

L C and dimL = n-k. (A-ll) 
In addition, let Jq C F^" he a set satisfying 

\/x,y&Jo,[y-x&L^^x = y], (A.12) 

and put 

J = Jq + L = {z + w \ z € Jo,w € L}. 
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Then, the df' -dimensional suhspaces of the form 

{V' e H®" I MM e Nl, MtP = t(M)V'}, (A.13) 

where t{M) are eigenvalues of M € Nl, are N j-correcting codes. 

In fact, the subspacc^ 

C(") = span {|.si, . . . , .s„_fe, s„_fe+i, . . . , s„) | (s„_fc+i, . . . , s„) e F^} (A.14) 

with a fixed {n — /c)-tuplc s = (si, . . . , s„_fe) G ]jr^'^'= jg such a quantum code. The 
equivalence of (A.13) and (A.14) follows from (7). Since there are d""*^ possible 
choices for (si, . . . , s„_fc), we have d""*^ codes. The term codes is applied to both 
a self-orthogonal subspacc L C F^", and quantum codes C*^*^ associated with L. 
The collection of quantum codes C or one from the collection, each possibly 
accompanied by a recovery operator, is called a symplectic code associated with L 
or symplectic (stabilizer) code with stabilizer N^. 

Since is spanned by 51, ... , 5„ and hn-k+i, ■ ■ ■ , hn, any coset of L-^ in F^" 
is of the form 

n 

{ ^{wiQi + Zihi) \ Zi = Si,i = l,...,n-k^ 

= {x I {gi,x)sp = Si,i = l,...,n-k} (A.15) 

with some {n — fc)-tuple s — (si, . . . , s„_fe). The set of cosets of L-^ and {TVj^C^"-* | 
X G Jo}, where NxC'-^^ denotes {N^^j \ ^ e C'^^} with being the abbreviation of 
(0, . . . ,0) G F^"*^, are in a one-to-one correspondence when Jq is a transversal (a 
set of coset representatives such that each coset has exactly one representative in 
it), i.e., when | Jo| = d^~^ . In fact, for any vector x in the coset in (A.15), we have, 
by (A.9) and (A. 10) or Section A.3 below, 

C(")=iV^C(°^ (A.16) 

The (n — fc)-tuple (si)i<i<n-fe is called a syndrome on the analogy with classical 
linear codes. 

To show that the subspace, say C, in (A.13) or (A.14) is really A/'j-correcting, 
we may use Theorem III. 2 of Knill and Laflammc^. Alternatively, we can directly 
check the error-correcting capability using the recovery operator specified by (17) 
and (18) as will be done in Section A.3. 

A2. Coset Arrays 

In discussing symplectic codes, it is often useful to conceive a coset array of L which 
has the form 

yo + xo + L yo + xi+L ■■■ ?/o + xk-i + L 
yi+XQ + L yi+xi-\-L--- ?/i + xk-i + L 

(A.17) 



yM-i +xo-\-L yM-i +xi+L 



J/M-l +XK-1 + L 
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where K = (f^, M = , {xi} is a transversal of the cosets of L in , and 
{Ui} is that of the cosets of L-^ in F^". Here, the integer index i of Xi is identified 
with s e F^-*=, which can be viewed as a d-ary number, and that of yi is to be 
similarly understood. In the array, each entry is a coset of L in F^". and each row 
form a coset of in F^". This array resembles standard arrays often used in 
classical coding theory^^'^^, and there is an analogy between them. For example, if 
we choose one coset Us + Xu + L from each row, and denote the union of these cosets 
by J, then there are recovery operators such that the resulting symplectic codes 
are A''j-correcting, which was already mentioned in the previous section and will 
be proved in the next section. [Entries of a standard array of a classical linear code 
arc not cosets but vectors, and if we choose a vector from each row, and denote the 
set of these vectors by J, then we can decode it in such a way that the resulting 
code is J-correcting.] 

A3. Proof of Lemma 2: Fidelity of Codes on Channels Subject to 
Probabilistic Weyl Unitaries 

To calculate the fidelity, we trace the action oi I on the state where 

^ S • . • ,/fe) O |si, . . . ,s„_fe,/i, . . . ,/fe) 

(ii,...,;fc)eFj 

is a purification of tt^cs) , s = (,si, . . . , s„_fe). 

Suppose an error N^, x G F^", has occurred on a state na,). We decompose x 
into 

n—k n — k k k 

a; = ^ w^g^ + ^ Zih^ + ^ z^+„_hhi+„-k + ^ Wi+n-kQi+n-k- 

i=l i=l i=l i=l 

Then, is the same as U3U2U1 up to an irrelevant phase factor, where U\ = 

'Z" , V = {wi, . . . ,Wn-k), U2 = X^,t = {zi,...,Zn-k), and U3 = , u = 

(0, ...,0, z„_fe+i,...,z„), u' = (0, . . . ,0, w„_fc+i, • • • By (A. 9) and (A. 10), 

I {U2Ui)\<^s){^s\I(^ {U2Uiy = I®U2\^s){^s\I®ul = |$.+t)($«+t|. The final 
part I^Uz acts on the state | | as a Weyl unitary. [These actions may be 

visualized in terms of a coset array as follows. Assume for simplicity s = 0""*^, recall 
iV^C(°) = C(*), and write C**) beside the i-th row of the array; Ui does nothing, U2 
translates the half of the state |cl?o) along the vertical hues to C'*^ and U^, acts as 
the Weyl unitary specified by (w, u') that corresponds to a horizontal index of the 
array in a one-to-one fashion.] 

Now suppose x{t) is expanded as x was to yield v, u and u' in place of w, m and u' . 
Then, only the effect of errors such that u = u and u' = u' is properly canceled 
out by applying Nl^^^y In fact, by Lemma 1, the entanglement fidelity equals one 

if X e x{t) + L and zero otherwise since the final states is X Z \^s)- Hence, 
we obtain the desired formula. 
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A4- Proof of Theorem 3 

Suppose the twirling is applied to pn = M„(^) to yield M„(^). Since the matrix 
of M„(^) is diagonal with respect to the basis {|\['a;)}2,g]f2T,, the mixed channel A 

has the form A: a ^ Pn{x)Nx(jNl with the probability distribution P„ = P4 

on F^"" by Theorem 1 of Choi"'^^ cis cir gued in Section 2.5. 

Now assume C C H®" is a code subspace, say C*^°\ of the symplectic code. Then, 
by Lemma 2 

P4(^(^) + i) = i^c(^c,7^(°■'U) 

X 

= ^Y.^.{K\-^c),M-'n^'''^KA). 

X 

Since N^C = {N^^j | -0 G C} ranges uniformly over the whole set of code subspaces 
of the symplectic code associated with L (Section A. 3 of this appendix or Section III 
of Ref. 19) as x runs through F^" [and Af-^Tl^^'^W^ = TZ'^^'*^ as can be checked 
easily], this means that the entanglement fidelity -F'c(7rc(s) , TZ^^'^'^A) of the symplectic 
code averaged over all code subspaces C^^\ s e F^"'^, is given by P_A,{x{t) + L), as 
promised. 

A5. Remark on Symplectic Stabilizer Codes 

If we define by (4) for d = 2, most existing arguments on symplectic codes work. 
In this case, however, we cannot assume Hi, 1 < i < n, to be all one in general. For 
example, recall the eigenvalues of XZ. 

Appendix B. Fidelities and Quantum Capacity 

In this appendix, only for a technical reason, we define three variants of Q, which 
will appear as Qe,d, Qp and Qp,d, and show that these are all equal to each other. 
This fact is used in the proof of Theorem 8 in Section 7. 

In Definition 5, we could have used minimum pure state fidelity 

Fp(C,B)= min 

in place of entanglement fidelity. The Qp is defined in the same way as Q with 
Ff. replaced by Fp. In Definition 5, we could also have restrict ourselves to codes 
{(C„, £„, !?„)} such that dimC„ = for some integer m for every n. We can 
define the achievability with this restriction on codes, and provided the employed 
fidelity is Ff. [Fp], we denote the corresponding capacity by Qe,d [Qp,d]- 

Now we will check the equalities among the four quantities. Put Qe = Q for 
accordance with the other three. It is known^^ that 1 — Fe(7rc,'B) < (3/2) [1 — 
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Fp(C, B}] for any TPCP map B. Hence, Qp < Qe, which is shorthand for 'Qp(^) < 
Qe(^) for any memoryless channel A\ Prom this fact and by definitions, we have 

Qp,d < Qp < Qe, 

and 

Qp,d < Qc,d < Qo- 

Then, ah we have to show is Qp^d > Qe- This follows from that the 
entanglement fidelity Fe{Trc,B) is not larger than the pure-state fidelity 
(dimC)"-^ J2,fes('+'\^i\'P) ifDlf) averaged over S, where S is an arbitrary orthonor- 
mal basis of C^". In fact, wc can reduce C to a good subspace C" C C of dimension 
[c?~-^dimCJ only with negligible loss of the fidelity as in the proof of Lemma 1 
of Ref. 6 or as in Section V-A of Ref. 21. Specifically, Fp(C4,B„) — > 1 for a good 
choice of C'j C Ci provided Fc{TTc^,Bn) ^ 1 as n — > oo, where B„ = VnA^^Sn- 
This implies Qp,d > Qe, completing the proof. 
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